Skip to main content
Glama
Sign In
hacktricks-mcp

hacktricks-mcp

by zebbern
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

hacktricks-mcp

MCP server that gives AI agents fast, offline full-text search and section-level retrieval over the HackTricks offensive-security wiki.

Unlike grep-based alternatives, this server ships with a pre-built SQLite FTS5 search index (1,000+ pages) inside the package. No install-time clone, no ripgrep dependency, no network access at query time. A GitHub Action re-syncs the index with upstream every 3 days and commits it back to this repo.

Quick start

Requirements: Node.js 22.13 or newer (uses the built-in node:sqlite, zero native dependencies).

Claude Code:

claude mcp add hacktricks -- npx -y @zebbern/hacktricks-mcp

Codex CLI:

codex mcp add hacktricks -- npx -y @zebbern/hacktricks-mcp

Any MCP client (Claude Desktop, Cursor, Kimi, etc.), config JSON:

{
  "mcpServers": {
    "hacktricks": {
      "command": "npx",
      "args": ["-y", "@zebbern/hacktricks-mcp"]
    }
  }
}

As a plugin (bundles the agent skill that teaches efficient usage): this repo is a valid plugin for Claude Code (.claude-plugin/), Codex (.codex-plugin/) and Kimi (kimi-plugin/). Add it from your client's plugin marketplace flow pointing at zebbern/hacktricks-mcp, or for Kimi Work use this plugin link.

Then ask things like:

  • "Search HackTricks for kerberoast and give me the attack commands"

  • "How do I escalate privileges from the lxd group?"

  • "Show me the SSRF section of the pentesting-web pages"

Related MCP server: grimoire

Tools at a glance

Tool

What it does

hacktricks_search

Ranked full-text search with snippets, category filter and abbreviation handling (privesc, sqli, rce, ...)

hacktricks_get_page

Read a page, a single section, or just its code blocks

hacktricks_get_toc

The wiki category tree, so agents can see where topics live

All tools are strictly read-only. Full reference: docs/tools.md.

Documentation

Security and legal

  • The server executes nothing from the wiki; it is a read-only search interface. All queries are parameterized, and user input is escaped before query construction.

  • HackTricks content is offensive-security reference material. Use it only on systems you are authorized to test.

  • Content belongs to HackTricks / Carlos Polop and contributors; this repo contains derived index data plus original server code (MIT).

Credits

Available Tools

3 tools
hacktricks_get_pageRead HackTricks PageA
Read-onlyIdempotent

Retrieve content of a HackTricks page found via hacktricks_search. By default returns the page outline plus content (truncated if very long). Use section= to read one section by heading name, or codeOnly=true to get just the commands/payloads. This is the token-efficient way to consume long pages.

Inputs: path (required), section, codeOnly. Returns: url, path, title, content, +2 more

hacktricks_get_tocHackTricks Table of ContentsA
Read-onlyIdempotent

Get the HackTricks wiki structure: categories and page tree. Call without arguments for the top-level overview, or pass a category to see its pages. Useful to understand where a topic lives before searching.

Inputs: category. Returns: tree, categories

hacktricks_searchSearch HackTricksA
Read-onlyIdempotent

Full-text search over the HackTricks offensive-security wiki (pentesting techniques, privilege escalation, web vulns, AD attacks, cloud, forensics). Returns ranked pages with snippets. Use specific technical terms (e.g. 'kerberoast', 'SUID', 'JWT algorithm confusion') for best results. Follow up with hacktricks_get_page on a result's path to read the content.

Inputs: query (required), limit, category. Returns: results

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A4.3/5.0

    Scored across 3 tools

    Disambiguation5/5

    Each tool has a clearly distinct purpose: full-text search for finding pages, page retrieval for consuming content, and TOC for structural overview. There is no overlap in action or resource that would cause misselection.

    Naming Consistency5/5

    All tool names follow a consistent snake_case pattern with the same 'hacktricks_' prefix and action-oriented verbs (search, get_page, get_toc). The convention is predictable and readable.

    Tool Count5/5

    Three tools is exactly right for a read-only wiki access server: search, retrieve, and navigate structure. Each tool earns its place without redundancy or bloat.

    Completeness5/5

    The surface fully covers the domain of consuming the HackTricks wiki: searching, retrieving pages with section/code filtering, and browsing the table of contents. No obvious gaps for a read-only access layer.

    Maintenance

    ActivityActive
    ResponsivenessNo recent community issues

    Resources

    Related MCP Connectors

    Related MCP Servers

    • search-docs

      otolab
      A
      license
      A
      quality
      B
      maintenance
      Enables AI agents to search local Markdown documents using natural language, with automatic indexing and section-level retrieval.
      10
      17 npm
      1
      MIT

    • grimoire

      PentHertz
      A
      license
      A
      quality
      C
      maintenance
      Enables AI models to search and retrieve offline security knowledge from over 20 curated sources including HackTricks, PayloadsAllTheThings, and OWASP guides, via the Model Context Protocol.
      9
      205
      MIT

    • HackTricks MCP Server

      Xplo8E
      A
      license
      A
      quality
      D
      maintenance
      Enables searching and querying HackTricks pentesting documentation directly from Claude, with tools for quick lookup, grouped search results, page outlines, section extraction, and cheatsheet mode.
      7
      84 npm
      11
      MIT